2016-03-23 20:46:30 +00:00
|
|
|
version: '2'
|
|
|
|
|
|
2016-05-07 08:38:37 +00:00
|
|
|
# Initialize
|
|
|
|
|
# docker run --rm -ti -v chrome_data:/data busybox /bin/sh -c "chown 1000:1000 /data"
|
|
|
|
|
|
|
|
|
|
volumes:
|
|
|
|
|
data: {}
|
2016-05-18 09:12:40 +00:00
|
|
|
certs: {}
|
2016-05-07 08:38:37 +00:00
|
|
|
|
2016-03-23 20:46:30 +00:00
|
|
|
services:
|
|
|
|
|
chrome:
|
2016-05-07 08:38:37 +00:00
|
|
|
image: andrey01/chrome
|
2016-03-23 20:46:30 +00:00
|
|
|
read_only: true
|
2016-05-07 08:38:37 +00:00
|
|
|
network_mode: bridge
|
2016-03-23 20:46:30 +00:00
|
|
|
devices:
|
|
|
|
|
- /dev/dri
|
2016-05-07 08:38:37 +00:00
|
|
|
# - /dev/video0
|
2016-03-23 20:46:30 +00:00
|
|
|
volumes:
|
2016-05-07 08:38:37 +00:00
|
|
|
- /tmp/.X11-unix:/tmp/.X11-unix:ro
|
|
|
|
|
- $XDG_RUNTIME_DIR/pulse:/run/user/1000/pulse
|
|
|
|
|
- data:/data
|
2016-05-18 09:12:40 +00:00
|
|
|
- certs:/home/user/.pki/nssdb
|
2016-05-07 08:38:37 +00:00
|
|
|
- $HOME/Downloads:/home/user/Downloads
|
2016-03-23 20:46:30 +00:00
|
|
|
- /var/run/cups:/var/run/cups:ro
|
2016-05-07 08:38:37 +00:00
|
|
|
- /var/run/dbus/system_bus_socket:/var/run/dbus/system_bus_socket:ro
|
2016-05-19 15:49:31 +00:00
|
|
|
- /tmp/krb5cc_1000:/tmp/krb5cc_1000:ro
|
2016-03-23 20:46:30 +00:00
|
|
|
environment:
|
2016-05-07 08:38:37 +00:00
|
|
|
- DISPLAY=unix$DISPLAY
|
|
|
|
|
- PULSE_SERVER=unix:$XDG_RUNTIME_DIR/pulse/native
|
2016-05-18 09:12:40 +00:00
|
|
|
# some webapps won't work when the timezone is not properly set, e.g.
|
|
|
|
|
# the ownCloud's (v9.0.0) calendar (v1.0.0.0) does not work correctly
|
|
|
|
|
# the same could happen with Icinga2 web interface
|
2016-05-07 08:38:37 +00:00
|
|
|
- TZ=Europe/Amsterdam
|
2016-05-19 15:49:31 +00:00
|
|
|
# SYS_ADMIN is NOT required if you run chrome with `--no-sandbox` flag
|
|
|
|
|
# more on CAP_SYS_ADMIN https://lwn.net/Articles/486306/
|
|
|
|
|
cap_add:
|
|
|
|
|
- SYS_ADMIN
|
2016-05-07 08:38:37 +00:00
|
|
|
# security_opt:
|
|
|
|
|
# - apparmor:docker-ptrace
|
|
|
|
|
# - apparmor:unconfined
|
2016-07-17 12:20:40 +00:00
|
|
|
# fixes the: grsec: denied resource overstep by requesting 28 for RLIMIT_NICE against limit 0 for /opt/google/chrome/chrome
|
|
|
|
|
ulimits:
|
|
|
|
|
nice: 28
|
2016-08-07 17:50:02 +00:00
|
|
|
shm_size: 4G
|
